System for on-demand access to local area networks

ABSTRACT

A roaming company makes payments to an aggregator of independent WLAN operators in exchange for providing Internet access services to subscribers of the roaming company. Independent WLAN operator accounts are maintained at the aggregation company.

BACKGROUND OF THE INVENTION

This application claims priority from U.S. Provisional Application60/344,899, filed Dec. 31, 2001.

FIELD OF THE INVENTION

This invention generally relates to communication systems and, moreparticularly, to a business model for expanding a network architecture.

BACKGROUND OF THE INVENTION

Internet services are available today, utilizing, for example, standardwireless protocols such as Cellular Digital Packet Data, also known as“wireless Internet Protocol” (wireless IP). (See CPDP SystemSpecification and Implementation Guidelines, Release 1.1, Wireless DataForum, Washington, D.C.) CDPD can be implemented in American MobilePhone Systems (AMPS) cellular networks, and thus a wireless Internetservice based thereon could become widely available, but the service isslow (given a data transmission rate of 19.2 kbps) and expensive(approximately $1.40 per megabyte of data transmitted). (The AMPS is afrequency division multiple access (FDMA) analog cellular systemdeveloped by AT&T Bell Labs in the 1970s).

Additionally, wireless local area networks (WLANs), for example, thosebased on the IEEE 802.11 standard, are emerging. (For furtherinformation regarding the IEEE 802.11 standard, refer to IEEE 802.11,1999 Edition (ISO/IEC 8802-11: 1999) IEEE Standards for InformationTechnology—Telecommunications and Information Exchange betweenSystems—Local and Metropolitan Area Network—Specific Requirements—Part11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY)Specifications; IEEE 802.11a-1999: 8802-11: 1999/Amd 1:2000(E)), IEEEStandard for Information technology Telecommunications and informationexchange between systems—Local and metropolitan area networks—Specificrequirements—Part 11: Wireless LAN Medium Access Control (MAC) andPhysical Layer (PHY)>specifications—Amendment 1: High-speed PhysicalLayer in the 5 GHz band; and IEEE 802.11b-1999: Supplement to802.11-1999, Wireless LAN MAC and PHY specifications. Higher speedPhysical Layer (PHY) extension in the 2.4 GHz band.)

WLANs currently offer peak instantaneous data rates of 11 Mbps (802.11b)or 54 Mbps (802.11b) over a range of approximately 100 meters. Despitethe relatively high data rates achieved by IEEE 802.11 based WLANs, suchWLANs have no standardized billing or service fee system. This lack ofmonetary incentive has limited the installation of 802.11 networks forpublic use. Thus coverage is primarily limited to private networks.

In summary, the wireless Internet service available today is anexpensive, fragmented service with limited coverage. To obtainreasonable data transmission rates and service coverage, one couldmaintain a CDPD subscriber account, and carry a CDPD PCMCIA modem card,and an 802.11b WLAN PCMCIA card. A portable computer would utilize the802.11b WLAN PCMCIA card for free in the home and office. It wouldutilize the 802.11b WLAN PCMCIA card for a fee at each hot-spot travellocation such as airports and some hotels. The portable computer woulduse the CPDP PCMCIA modem card for general use outside the home oroffice. Access to the CDPD network incurs additional fees to yet anotheroperator.

Network operators have not embraced development of a wirelessinfrastructure because of the perceived need to acquire sufficientlicensed radio frequency spectrum to build out a nation-wide network, acostly undertaking. With the uncertainties raised by the introduction ofother technologies such as GPRS/EDGE and CDMA-2000, and the recenthistory of the wireless market, these operators are proceeding slowlyand cautiously.

What is needed is a business model, network architecture and protocolsthat facilitate development and operation of a wireless infrastructureto provide ubiquitous wireless Internet access.

BRIEF DESCRIPTION OF THE DRAWINGS

The present invention is illustrated by way of example, and notnecessarily by way of limitation in the figures of the accompanyingdrawings in which like reference numerals refer to similar elements.

FIG. 1 illustrates an embodiment of the invention.

FIG. 2 illustrates another embodiment of the invention.

DETAILED DESCRIPTION

Reference throughout this specification to “one embodiment” or “anembodiment” means that a particular feature, structure or characteristicdescribed in connection with the embodiment is included in at least oneembodiment of the present invention. Thus, appearances of the phrases“in one embodiment” or “in an embodiment” in various places throughoutthis specification are not necessarily all referring to the sameembodiment. Furthermore, the particular features, structures orcharacteristics may be combined in any suitable manner in one or moreembodiments.

A business model, network architecture and software are described forimplementing and operating a worldwide wireless internetworkinfrastructure. The infrastructure includes a distributed wirelesspacket data network based on wireless local area networking (WLAN)technology and utilizing high speed (e.g., 1-54 megabits per second datarates), low cost (e.g., less than $100) wireless data terminalequipment, also known as a “user terminal” or “UT”. However, it isappreciated that wireless technology and data terminal equipment are notsufficient incentives, on their own, to build a wireless network—alsoneeded are the economic incentives to invest in building a comprehensivenetwork necessary to support a wide variety of wireless networkservices.

Content Service Provider Model

An embodiment of the invention described herein aligns the interests ofwireless base station operators, Internet service providers (ISPs), andcontent providers, and provides a means by which money flows from endusers to content providers and then back to the ISPs and wirelessbase-station operators, thus providing an incentive to expand thewireless network infrastructure. In this manner, it is expected that,for example, thousands of entities become independent wireless basestation operators. It is contemplated that some entities, such asindividuals, will become base station operators for a cut of thesubscriber revenue stream. Other entities, such as hotels andrestaurants, will do so because their regular customers see wirelessInternet coverage as a value added service. Still others will set up andoperate base stations in their homes and offices simply for personaluse. As a side effect of all of these interests, a wireless networkinfrastructure will expand to cover areas in which end users want to,and can, use their UTs.

The invention provides an environment for content providers to developwireless services for end users while returning a fraction of thecontent providers revenues, for example, to the network, fordistribution back to the Internet Service Providers (ISPs), and/or theradio base-station operators. It is contemplated that every entity iscapable of being independent of the others, from the wireless radiobase-station operators, the ISPs, to the content providers.

FIG. 1 illustrates one embodiment of the invention 100, in whichindependent radio base-station operators build ubiquitous wirelessInternet coverage based on monetary incentives. Prior art approaches toproviding such coverage suffer from scaling problems that limit the rateof growth and adoption—it is a huge task for a single or small number ofentities to build and operate a complete network, market user terminals,bill subscribers, acquire radio frequency spectrum, etc. The inventiondiffers from such other models, e.g., Metricom's now defunct Ricochetwireless Internet approach, mainly by distributing responsibility forbase-station acquisition, siting, and operation to independentbase-station operators in exchange for some portion of end user orsubscriber revenues.

A user terminal (UT) 105 communicates with a server, for example, aserver 130 connected to the Internet 120 and operated by a contentservice provider, such as Amazon.com. The term user terminal, as usedherein, refers to a user device or user equipment, and may be any typeof computing device. Additionally, a user is a device or applicationattached to or coupled with the UT, and an end user or subscriber is aperson or entity owning or using the user/UT. The subscriberperiodically pays for Internet based services, such as Voice overInternet Protocol (Voice over IP, or VoIP) phone calls, book purchases,stock quotes, etc., as represented by arc 150 in FIG. 1. A portion ofthese payments are distributed by the network infrastructure to theproviders of the various network data carrying services actually used(denoted by arcs 151 and 152), including the operator of a wireless basestation (denoted by arc 153).

The UT may be any electronic device having wireless radio frequencycommunication capabilities, or coupled to or with a device having radiofrequency communication capabilities, such as a wireless modem.Additionally, software, such as driver software, may be resident in theUT so the UT can operate in a network in accordance with the presentinvention.

For example, the UT may be a desktop or laptop computer, a personaldigital assistant (PDA), cellular telephone, two-way pager, or the like.In one embodiment, UT 105 contains a radio that transmits and receivesInternet Protocol (IP) datagrams or packets to and from the Internet120. The radio can be a PCMCIA card-based wireless modem. Part of thecommunications link between the UT 105 and the server 130 is a wirelessradio frequency link 107.

A wireless access point 110, or simply, access point 110, is a wirelessbase-station that collects packets from and distributes packets to userterminals in its wireless coverage area. The access point typically iscoupled via a link 112 to ISP 115, which in turn, connects to theInternet 120 via link 117. Ideally link 112 is fast and inexpensive(e.g. cable modem, xDSL line, wireless point-to-multipoint, etc.) but itcould also be a simple dial-up connection, depending on the base stationhardware and software, base station location, and amount of traffictransmitted via the base station. A person or business may be the ownerand/or operator of one or more such access points.

The access point 110 can be an IEEE 802.11 base station, capable ofcommunicating with user terminals via the radio frequency link 107 usinga wireless protocol such as IEEE 802.11. While FIG. 1 illustrates asingle UT and a single access point or wireless radio base station, itis appreciated that many base stations and many more UTs are utilized,indeed, desired, to support, for example, a world-wide wireless networkinfrastructure.

In one embodiment, the access point, in addition to providing wirelessservice coverage for UTs in its service area, collects billinginformation, for example, based on data traffic processed by the accesspoint. The access point collects traffic data, that is, statistical dataabout the data traffic, necessary for billing. The access point operatorreceives payments, as represented by arc 153, for providing wirelessInternet services. The payments can be calculated, at least in part,based on the billing information collected by the access point. Theaccess point furthermore may collect billing information on a per UTbasis, so that depending on the type of subscriber account associatedwith the user of the user terminal, the subscriber can be billed, andthe access point can receive a portion of a payment by the user for thebill, based on the collected billing information. For example, for flatrate service (e.g., a subscriber pays $20/month), the access point needonly count bytes, or number of packets, of traffic carried, while formeasured rate service (e.g., a subscriber pays $15/month plus $0.10 permegabyte (MB) over 50 MB per month and $0.05 per MB over 200 MB permonth), a byte count per UT (as identified, for example, by the UT's MACaddress or encrypted digital identification) is maintained.

The access point includes software that routes IP packets, collectsbilling information, and cooperates with the other network entities todeliver network services. Alternatively, such software may reside in theISP 115. Given the ISP's possible hardware platforms likely are morevaried than the access point's possible hardware platforms, it may be,from a developer's perspective, better to develop router software foraccess points rather than ISP hardware platforms. Ultimately, it iscontemplated that this software will be capable of being executed onmany access point platforms. However, initially it is contemplated torun on a Microsoft Windows98/Windows2000/WindowsNT or Linux PC with awireless LAN base station coupled thereto.

The router software performs many functions, including requestingauthentication of UT identification as new user terminals requestadmission to the network; keeping track of local, private user terminalswhich may be allowed to use the network free of charge; filteringunauthorized traffic; providing fire-wall services so that public userterminals cannot send and receive packets to machines on a private LAN;coordinating hand-over of a roaming user terminal with other accesspoints; tunneling (encapsulating) traffic to other access points after aroaming user terminal subscribing to full or partial mobility servicehas moved on to another access point; unwrapping (decapsulating) traffictunneled to the user terminal's present access point from the userterminal's original access point; and collecting billing traffic summarystatistics (for example, bytes transferred for each user terminal) andstoring them for upload to the billing entity.

In one embodiment of the invention, a conventional wired InternetService Provider (ISP) 115 provides access point concentration. That is,multiple access points access the Internet via the same ISP. Inparticular, each access point 115 is connected to the Internet 120,usually by the back-haul services provided by the ISP. The ISP usuallyhas a high-speed trunk connection 117 to the Internet 120. Thehigh-speed trunk is often a T1, T3, or ATM connection.

Responsibility for customer billing and marketing may or may not bedistributed among Internet-based content and service providers, many ofwhom provide specialized services with specialized terminal equipment(e.g., a VoIP phone). To the extent billing is distributed betweenvarious service providers, the revenue/value chain is more complicated,but in any case, investment is further distributed and the potential forwireless network infrastructure growth is expanded in accordance withthe present invention.

An authenticator 125 is connected to the Internet 120 and providesauthentication services to access points and user terminals. Theauthenticator 125 charges a fee to content service providers, such asthe content service provider operating server 130, for allowingsubscribers access to the network 100. The fee provided theauthenticator, represented by arc 151, is some portion of subscriberpayments to content service provider 130 for providing, among otherthings, authentication services for the content service provider and theprovider's subscribers. Router software, whether executing on thehardware platform of the access point or ISP, queries the authenticatoras to whether to provide packet delivery services for a given user. Theauthenticator, using encryption software, communicates with a userterminal, in particular, software such as driver software, on the userterminal, to authenticate the user. In one embodiment, the authenticatoralso queries the content service provider to verify the subscriber hasadequate credit standing to gain access to the network.

Upon receiving a response from the authenticator, router softwaredecides whether to continue to provide packet routing and deliveryservices for a particular user terminal. If authentication fails, thenservice for the user terminal is restricted. In one embodiment, theauthenticator also provides a code to the router software for use ingenerating encrypted billing information for that user terminal. Theauthenticator collects traffic data statements from router software, viathe ISP back haul line 117, and stores the statements for use incalculating usage-based payments back to ISPs and access pointoperators, respectively represented in FIG. 1 by arcs 152 and 153. Inone embodiment, if the authenticator and billing entity functionality isdistributed among different platforms and/or service providers, theauthenticator further uploads the collected billing traffic statisticsto the billing entity hardware/service provider. In one embodiment,communication between the access point and the authenticator isencrypted to prohibit impersonation of the authenticator and/or accesspoint.

The content service provider operating, for example, server 130,provides Internet content for which a subscriber is willing to paymoney, for example, a subscription fee. In the case of a subscriptionfee based service, the content service provider collects periodicpayments from subscribers and pays the network access bills generated bythe authenticator. The authenticator then distributes some portion ofthese revenues, referred to herein as a rebate, back to ISPs and/oraccess point operators based on the services they provided (e.g., numberof bytes transmitted). In some content service provider models, novalue-added content is served—the subscriber simply gets an Internetconnection in a fee-for-bytes or flat rate arrangement similar to aconventional, wired ISP.

The rebates can be tiered based on how much an operator pays for abase-station. Subsidized base-stations might carry a smaller rebate thanones sold without subsidy. In fact, overpayment for base-stations ispossible to provide a means for an operator to invest in the billingentity service provider.

Although not shown in FIG. 1, a Home Location Register (HLR) mayoptionally be utilized in the network 100. The HLR comprises an Internetresident database of user terminal locations. Router software or driversoftware updates records in the HLR as mobile user terminals move aboutfrom WLAN to WLAN, that is, from one access point to another accesspoint, or from one ISP to another ISP. In one embodiment of theinvention, the content service provider may provide the HLR.

In conjunction with the optional HLR, an optional mobility service isavailable to a user terminal. The service provides a fixed IP addressfor a mobile user terminal. A mobility service provider can keep trackof the whereabouts of a user terminal, with reference to the HLR. Theactual implementation of mobility services depends on the underlyingservice. Mobility services provided by a single server can simply followthe user terminal around as the IP address assigned to the user terminalchanges.

An important underlying principle of the wireless network architectureand business model contemplated by the present invention is that allentities participating in the set up and operation of the network shouldhave something to gain from expanding and improving the network and itsservices. For example, content service providers such as Amazon, Yahoo,Quest, Level3, etc., get customers that the content providers can targetwith merchandise, wireless devices, and services of all kinds. A musiccompany can sell songs for a wireless MP3 portable musicdatabase/player. An Internet VoIP phone company can sell voicecommunications services. An online bookstore can sell books that asubscriber downloads and reads on a portable electronic device. Onlinemagazines can sell access to their services. A medical monitoringcompany can sell real-time analysis of heart rhythms, possibly detectinga heart attack before it happens. The potential applications arenumerous.

Ubiquitous, high-speed, wireless Internet service opens newopportunities for providing content and services. The applicationcontent service providers increase revenue from a growing user base.Users subscribe because of all the available content. Furthermore, theapplication content service providers market wireless devices andservices that build the user base fueling demand for the network.

Subscribers get access to a wide range of goods and services madepossible by high speed, ubiquitous wireless Internet service coverage. Asubscriber gets “tetherless Internet access” near any access point. Thenumber of installed access points increases until wireless Internetservice coverage becomes ubiquitous. As WLAN technologies improve, datarates increase. However, the subscriber need not wait for a full networkdeployment to perceive significant value. The subscriber can purchase apersonal access point and have tetherless Internet access in their homeor office, which is the key to getting the wireless networkinfrastructure in place.

As mentioned above, Internet Service Providers (ISPs) provide back-haulservices from wireless access points to the Internet. A rebate scheme isstructured such that the ISPs are paid for the data traffic that theytransport between the Internet and access points, however calculated.Thus, it is in the interest of ISPs to encourage the installation ofmore and more access points providing coverage and increasing wirelessInternet usage.

In one embodiment, ISPs also provide fixed IP addresses and mobilitymanagement services for users who wish to maintain a continuous Internetconnection while roaming between WLANs. For services that require thesecontinuous connections, (e.g., VoIP services) content service providersmay contract with ISPs to provide fixed virtual connections to mobileusers. This fixed IP address and mobility management service performsthe same function as an HLR in a cellular telephone network, which arewell known in the art, and thus not discussed further herein.

It is contemplated that some access point operators will install basestations just to get wireless Internet service coverage where needed fortheir own use as subscribers. A typical example of this scenario wouldbe a home user who buys an access point to get coverage in their home.Back-haul services would be provided through a cable modem, xDSL line,or even 56 k dial-up connection. Depending on the range of the WLANtechnology embodied in the base station, the home user mightincidentally be providing service to their neighbors, for example, inapartment buildings. Another example is businesses that install basestations to provide tetherless Internet access within their facility.Security features in the access point router software would providedifferent routing services for company employees versus “foreign” users.For example, employees may be allowed to mount directories on a localfile server, but foreign users would not see any local servers.

However important these incidental access point operators are toproviding ubiquitous wireless Internet service coverage, the rebatescheme is structured to ensure an incentive to become an access pointoperator. Airports, hotels, coffee shops, libraries, bookstores,shopping malls, etc., will install access points for the revenuegenerated by rebate payments. This financial feedback is what drivesoperators to provide service at locations desired by users and to splitwireless service areas to provide adequate capacity.

Eventually, it is envisioned that the subscriber base might be largeenough that establishments such as coffee shops, bookstores, and hotelsprovide coverage on their premises as a service to their customerssimply to maintain competitiveness in drawing customers.

The clearest incentive is to the authenticator/billing entity, which isthe primary collector of the subscriber generated revenue stream, with aportion of this revenue provided to access point operators and ISPs as arebate. The authenticator, or authentication service provider, maintainsthe keys to access network 100. No user terminal can access a foreignWLAN without permission from the authenticator. The authenticator alsocollects billing information (for example, VoIP telephone call detailrecords) from the ISPs for each user terminal session. This billing datais provided to content service providers for use in billing the user.The content service provider pays the authenticator to keep subscribersin the authenticator's database, thereby ensuring continued access tothe network 100.

Manufacturers are presented with the opportunity to sell base stationsand user terminals. Access points are not sold to a small group of largeoperators—instead, access points are high volume consumer electronicsdevices. Likewise, user terminals need not be tied to specific serviceproviders. They can be sold directly to consumers and retailers.

Any number of content service providers can utilize network 100 and thebusiness model described above to provide applications to subscribers. Abrief description of some possible content services follows.

The simplest service is a general Internet Protocol (IP) packet deliveryservice. The UT in this case may be a WLAN card in a laptop PC. Theservices provided to the subscriber include various Internet applicationprotocols, including HTTP (world wide web browsing), telnet, FTP, etc.The content service provider has no infrastructure other than billing,takes call detail information from the Authenticator, debits thesubscriber's billing account, and sends an account statement, forexample, via electronic mail, to the subscriber. The bulk of thesubscription fee is transferred (as designated by arc 151 in FIG. 1) tothe authenticator and then distributed to the ISPs (arc 152) and accesspoint operators (arc 153). A typical subscription fee schedule might be:

0 to 20 MB/month @ $19.99/month, plus $1/MB for >20 MB/month

Of this, for example, 80 percent is transferred to the authenticator,and then 80 percent of that is transferred to the ISPs.

Low mobility cellular telephone service, similar to Personal HandyphoneSystem (PHS) in Japan, can be readily provided by VoIP-enabled WLAN userterminals that have the appearance of cell phones. These user terminalscooperate with application software resident either at their home ISP orat the content service provider's servers. This software coordinates thedelivery of compressed voice packets between the user's terminal and apublic switched telephone network (PSTN) gateway nearest the terminationpoint of the phone call. The authenticator charges the content serviceprovider per MB of voice traffic sent from and received by the user'suser terminal (i.e., phone). The content service provider bills theuser, for example, based on this usage data or, for example, based onmore detailed information about call sources and destinations.

An additional application contemplated by the invention is an electronicbook service that comes with an electronic book reader device withstorage for several books and a display. Using the book reader device, asubscriber can visit an electronic book reader service web site, browsebook content, select for purchase and purchase book content, anddownload book content for reading when out of wireless range (e.g. on anairplane, in a car) or even have a printed copy delivered to your house.The book reader service provider and the original author are secure inthe knowledge that the downloaded book cannot be copied and furtherdistributed without physically breaching the electronic book device.

An MP3 service would operate in a manner very similar to the electronicbook service, but the information content is music rather than prose.The user terminal would have real-time access to the libraries of musiccontent. Control of the physical user terminal device and protocolsallows the content service provider to be secure in the knowledge thatthe music downloaded will not be illegally redistributed.

One example of an implementation of an embodiment of the inventionfollows. A subscriber accesses an online bank via a user terminal, UT1.The subscriber then purchases credit for 1000 units of Internet accessfor some amount of money, say $10. The units may represent any measureof Internet access, for example, bandwidth, time, characteristics ofservice, or some combination thereof. The online bank mints acertificate, N1, for the subscriber by generating a 512 bit randomnumber, storing it in the subscriber's database record at the onlinebank along with an identifier for UT1, UT1_ID, and the number of unitspurchased, in this example, 1000 units. (The random number that is thecertificate is a representation of the units purchased by thesubscriber.) The random number is then encrypted and sent to thesubscriber.

At some point the subscriber then accesses the Internet. An accesspoint, AP1, receives a page from the UT1, and as part of the process ofsetting up a session, queries the subscriber for a deposit againstfuture data traffic with UT1. The subscriber responds by sending thecertificate to the online bank with a request that some number of units,say 2 units, be reallocated to AP1.

The online bank receives the certificate N1 from the request andverifies that UT1 indeed owns 1000 units, mints a new certificate, N2,representing 998 units for UT1, and another certificate, N3,representing 2 units for AP1, and provides the certificates to UT1 andAP1, according to the same process as described above. After both UT1and AP1 acknowledge receiving their change (998 units) and payment (2units), respectively, certificate N1 is removed from the subscriber'sdatabase, and certificate N2 is added in its place. The certificate N3is added to the access point's database record maintained at the onlinebank as well. Alternatively, the certificate N3 is not needed; 2 creditsare simply added to AP1's account balance at the online bank. At the endof a billing cycle, e.g., the end of the month, access points receive acheck for their credit balance.

Aggregation of Wireless Internet Services Operators

One embodiment of the invention contemplates aggregating independentwireless local area network operators under the management of a singleentity, referred to herein as a wireless local area network (WLAN)aggregator, or simply, aggregator. The aggregator maintains a networkserver to support the service it provides the WLAN. The aggregator mayalso be responsible for presenting competitive Internet services tousers, in particular, mobile wireless users, for selection of suchservices, and centralizing management of billing and receiving paymentfor such services. FIG. 2 illustrates network architecture 200, as wellas the relationship between and business model encompassing the entitiescomprising the network architecture, envisioned in accordance with theembodiment of the invention.

Subscribers 202 and 204 access an internetwork such as the Internetutilizing mobile wireless user terminals (not shown). Many suchsubscribers need or desire access to the Internet when out of the officeor traveling. When accessing the Internet from a location other thanfrom their home location, the subscribers are said to be “roaming”.Additionally, subscriber accounts and their user terminals can beinitialized and configured so that regardless of where the subscriberattempts to access the Internet, they appear to be roaming.

The subscribers obtain wireless Internet service from any one ofmultiple wireless local area network (WLAN) operators such as wirelessLAN operator 220. Additionally, the subscriber may obtain Internetaccess via other services, such as a wireless broadband ISP, broadbandISP (e.g., Ethernet), or a dial-up modem based Internet serviceprovider, depending on such factors as characteristics of service,access rates, geographic location, availability/coverage.

Roaming companies 205, 206, provide the subscribers access to thenetwork. More particularly, roaming companies, among other things,establish and maintain a relationship with a subscriber, includingmaintaining the subscriber's account, billing the subscriber forservices provided, and paying service providers or service providerbrokers for services accessed by the subscriber.

The role played by a roaming company may vary. An aggregator affiliatedroaming company 205 may establish an affiliation directly with a WLANaggregation company 215 (“the aggregator”). The aggregator aggregatesthe Internet services provided by numbers of typically small,independent WLAN operators. (The aggregator, its functionality, andaffiliation with the roaming company 205, are discussed more fullybelow). It is appreciated that the roaming company may also oralternatively work through a roaming broker company 210, or simply,broker, to provide wireless Internet access to its subscribers.Alternatively, a roaming company 205, 206 may only establish anaffiliation with one or more brokers, such as one of brokers 210, 212,to provide access to it subscribers.

Either broker may offer Internet service access via any one of severalInternet Service Providers (ISPs) 217, 218, 219 and 215. The ISPs, inturn, provide various types of connections to the Internet, including,as examples, dialup modem, xDSL, Ethernet, or wireless access. Finally,a corporation 207 may go through a broker 212 to obtain Internet accessfor its employees/agents. In the case of corporate subscribers,individual accounts typically are not independently billed—rather, usageis sponsored by a single corporate account with the broker.

A broker serves, as the name suggests, as an intermediary betweenroaming companies and several, typically large, ISPs. The brokeraggregates local and/or regional ISPs into a single unified, globallyaccessible ISP. The broker presents to the roaming companies a unifiedservice plan by negotiating with each of the ISPs as a representative ofthe many roaming companies.

Dialup Internet service providers (e.g., ISP 217) typically provideaccess to banks of dial-up moderns in various geographic regions. Theseregions tend to be localized in countries or regions based on telephoneaccess tariff and governmental structures. Broadband Internet serviceproviders (e.g., ISP 218) provide access to wired broadband Internetaccess utilizing communication technologies such as DSL and Ethernet.These ISPs typically are associated with hotel chains, phone companies,and others with the wired infrastructure and access to usage locations.

Wireless Internet service providers (e.g., ISP 219) provide access towireless, typically broadband, Internet connections. Some of theseproviders offer fixed wireless access while other providers offerportable, or mobile, access through WLAN and other technologies. Stillothers provide high-speed mobile connections using technologies such asGPRS. These service providers typically have substantial investments inlicensed frequency spectrum or exclusive rights to Internet “hot spots”,that is, geographic locations where Internet usage is relatively high,such as airports and convention centers.

Smaller wireless Internet service providers, referred to herein asindependent WLAN operators, provide Internet connectivity. However,given the size of these operators, it is difficult to match upsubscribers with the operators, especially when the subscriber isroaming and has no knowledge of the operator in or near the locationwhere the subscriber is roaming. Aggregators such as aggregator 215 playan important role in such instances by providing a mechanism forpotentially thousands of independent WLAN operators (e.g., operator 220)to present a unified service broadly accessible to roaming subscribers.The WLAN aggregator typically maintains a network server that provideslocation information helpful for finding WLAN access points, accessservice advertisements, characteristics of service testimonials,marketing, and other services to WLAN access point operators and endusers. Importantly, the WLAN aggregator provides a secure, fraud-proofaccounting mechanism that is used to transfer money from roamingcompanies which bill subscribers to the independent WLAN operators thatprovide packet data carriage service.

Independent WLAN operators (e.g., 220) provide a broadband wirelessInternet connection for a local area. These operators are characterizedby extremely low investment in equipment, use of unlicensed spectrum andequipment, and often by operating their WLAN service provider businessas an adjunct to their core business. Typical examples are a library,coffee shop, household, dormitory, small hotel, gas station, etc.

The network components that make the aggregation of independent WLANoperators possible are the one or more roaming companies 210, 212, theaggregator of independent WLAN operators, 215, and the gateway 225. Theroaming companies maintain subscriber accounts and collect money fromthe subscribers for WLAN access services rendered. Thesesubscriber-generated funds are the ultimate source of all funds used tooperate the network 200. These funds are also the source, at least inpart, of the funds needed to encourage the building and expansion of thenetwork.

In maintaining subscriber accounts, a roaming company operates asubscriber accounting service/server that authenticates a subscriber,verifying the subscriber's identity. The service further authorizes abilling charge against the subscriber's account, keeps track of thesubscriber's account balance and ultimately pays the appropriate broker,ISP, or WLAN aggregator for cumulative usage.

In addition, the roaming company provides detailed usage information tothe subscriber, reconciles usage records with the subscriber's notion oftheir usage, and collects payments from subscribers. The accountingserver is a network component that can be accessed by the aggregator, orpossibly directly by the operator's gateways, to provide the abovementioned user authentication and authorization services to theaggregator 215.

The aggregator performs many functions, including maintainingindependent WLAN operator accounts, authenticating gateways associatedwith an WLAN operator, maintaining maps of available independent WLANservices by geographic location, and providing service advertisements,including competitive service advertisement certificates (includingCharacteristics of Service (COS) testimonials (certified performanceadvertisements)). In one embodiment, the service advertisements aredistributed among and delivered by at least one server associated witheach independent WLAN operator. Alternatively, the serviceadvertisements are distributed among and delivered by at least oneserver associated with each Internet Service Provider that servesindependent WLAN operators.

In order for the aggregator to provide competitive service advertisementcertificates, including COS indications for a particular WLAN operator,the aggregator further monitors each WLAN operator for information. Theaggregator may monitor, for each of WLAN operators, at least one of thefollowing: a fee for the network access provided by the WLAN operator,for example, the price per a unit of service, however such service iscalculated; a measure of a rate of data transferred by the WLANoperator, such as medium term maximum average data rate; a measure oflatency in transmitting and receiving data via the WLAN operator, forexample, the typical round trip time; a measure of an availability ofthe network via the WLAN operator, which may be calculated a number ofways, including uptime/(uptime+downtime).

The aggregator may also monitor such WLAN operator characteristics as:an indication of a level of user satisfaction with the WLAN operator,including providing access to customer testimonials/reviews regardingthe service; an indication of when the network was last accessed by auser via the WLAN operator, a measure of the number of users presentlyaccess the network via the WLAN operator (e.g., number of users “loggedin”); an average data transmission rate for data transferred over thenetwork via the WLAN operator, and an indication of available datatransmission capacity of the WLAN operator.

It is appreciated that subscribers may be used in collectingcharacteristics of service metrics. For example, a subscriber's userterminal software may be asked to respond to a “ping” or other suchechoing protocol, for example, with a sequence of small and/or largedata packets to measure network characteristics such as latency andthroughput. Data throughput may also be detected, for example, byflooding pings to a user that accesses the network via the WLAN operatorto estimate a data rate, such throughput indicating, for example, aaverage of a number of floodings of pings done at random over a periodof time

The aggregator may provide a digitally certified (e.g., using a signedhash) service summary record that lists the above characteristics andgeographic location information for a particular WLAN access point andthose nearby the roaming subscriber. In one embodiment, the serviceoffered is inseparable from the information provided in the summaryrecord. The information provided may furthermore comprise a map ofnearby WLAN access point locations, as well as a textual description ofsuch locations. The map may include symbols or icons representing thelocations of the WLAN access points. Moreover, the map may includedirections from one WLAN access point to another—this would be useful,for example, in the event of multiple access points at the samelongitude and latitude, but separated vertically, as in access points ondifferent floors of a office building.

The WLAN access points advertised may include access points outside arange of access points immediately accessible to a subscriber, at leastnot without moving closer to the access points. Indeed, based on thecharacteristics of the access point, for example, the costs associatedwith accessing the network via the point, a subscriber may be willing tomove to a new location within a range of which the access point isreachable to provide communication with the network.

In one embodiment of the invention, Internet service advertisements arepresented by an independent WLAN operator, or gateway acting as an agentfor the operator, but supplied to a subscriber by the aggregator inorder that honest presentation of competing options are presented, thatis, the aggregator digitally signs the advertisements, thereby creatinga secure advertisement so that a particular WLAN operator is unable totamper with the advertising information regarding competing WLANoperators.

The digitally certified summary may include a time window or a timestampthat prevents or prohibits continued use of old, outdated or otherwiseobsolete advertisements and automatically invalidate forgeries of, orhacking into, advertisements. The time window specifies a period of timetherein during which the advertising information is considered valid.The timestamp specifies a date after which, or a date from which iscalculated a date after which, the advertising information is consideredinvalid.

Additionally, the aggregator measures WLAN performance on a per operatoror per access point basis, including maintaining statistical informationsuch as uptime, round-trip-time, throughput, etc., for the operator.

The aggregator also bills and collects funds from roaming companies forservices rendered to their subscribers, holds payment promises in escrowuntil service has been confirmed, and ultimately makes payments to WLANoperators for the services rendered.

In this manner, the aggregator combines a number of independent WLANoperators, the number of which are otherwise too large, diverse, anduncooperative/competitive to be controlled by conventional businesspractices and, using in secure digital encryption technologies,constrains them into providing a secure and reliable wireless dataservice to subscribers. To that end, the aggregator operates a serverthat is an intermediary between the WLAN operator gateways and thesubscriber accounting servers operated by the roaming companies.

The third network component earlier mentioned as making aggregation ofindependent WLAN operators possible is the WLAN gateway 225, a networkcomponent that constrains the manner in which un-registered subscribersmay access the Internet via one or more WLAN access points. The gatewayseparates a group of WLAN access points from the operator's WLAN. Anagent resident in the gateway filters WLAN packets, allowing onlyproperly registered subscribers to access the Internet. If a subscriberdoes not have a valid account on a roaming company server, then Internetaccess may be limited to a specialized subset of the Internet (e.g., newsubscriber signup pages or location-based advertisements).

Additionally, the gateway acts as an intermediary between thesubscriber's Internet service selection (or “dialer”) software and theaggregator's server. (A discussion of the Internet service selectionsoftware is provided below). The gateway communicates with theauthentication/authorization service on the roaming company server toaccount for all subscriber traffic passing through a particular accesspoint. By soliciting payment promises from a subscriber andconfirmations from an independent WLAN operator, the gateway conveys asubscriber's commitment to pay for Internet service back to the accountmanagers at both the roaming company's server and the aggregator'sserver for the subscriber and operator respectively. Finally, thegateway in presents service advertisement information to thesubscriber's user terminal, listing services available, cost,performance, and nearby competing service offerings.

In one embodiment, the gateway is implemented on the WLAN operator'splatform, rather than a separate platform coupled between the accesspoints and the operator's platform. To do so, software that implementsthe gateway functionality would be installed and executed on theoperator's platform in such a manner as to cooperate with the ISProuting infrastructure.

Following is an outline of the functions performed by each of thenetwork components:

1) subscriber's agent (“dialer”) functions:

-   -   find available connections;    -   solicit service offerings (price and quality (signal strength,        speed, latency, complaint count));    -   display location based map of access points based on latest        information from a central registration database of independent        WLAN operators maintained by the aggregator;    -   allow the user to select from the displayed service offerings or        auto-select on behalf of the subscriber;    -   initiate service request after selecting;    -   prove identity of subscriber;    -   authorize payment by subscriber;    -   firewall filter incoming (and, in one embodiment, outgoing)        traffic;    -   set-up/re-establish a virtual private network (VPN) to a home        base or local VPN service;    -   authorize additional payments as credit is consumed by a        subscriber;    -   reconcile log against monthly bill and alert aggregator when        inconsistencies occur;    -   participate in WLAN access point performance evaluations for        producing quality metrics;        2) operator's agent (gateway) functions:    -   DHCP server or proxy/gateway to provide IP address;    -   transmit Internet service advertisements;    -   redirect new subscriber to a signup page operated by the        aggregator;    -   challenge subscriber's identity;    -   solicit payment authorization certificates from subscribers;    -   avoid giving free service to unregistered or other users;    -   terminate local VPN for over-the-air security;    -   send session bills to database maintained at aggregator's        server;    -   periodically send “I am alive” to aggregator so that the access        point locations database can be kept up to date;        3) roaming company accounting server functions:    -   maintain credit card account for each subscriber;    -   maintain micro-transaction account for each subscriber;    -   maintain additional personal billing information for each        subscriber;    -   communicate with subscribers via email;    -   maintain a subscriber's secret key;    -   accept usage records from aggregators;    -   maintain online account status for subscribers;    -   pay monthly settlements to roaming brokers and aggregators;        4) aggregator accounting server functions:    -   maintain WLAN operator's credit card account;    -   maintain WLAN operator's micro-transaction account;    -   maintain operator's email address;    -   maintain database of access points locations, status,        performance;    -   keep complaint logs for operators;    -   keep operator's secret key;    -   keep list of recent checks cashed to avoid replay attacks in        spite of clock offsets;    -   secure clock setting service for subscribers and operators;    -   maintain a list of free-trial subscribers keyed by credit card        numbers, with a limit of some number of days of free trial per        credit card number;    -   measure access point performance by pinging subscribers for        round-trip-time, back-haul data rate, dropped packet rate, etc.        This information is provided in encrypted (non-modifiable) form        to the gateway for service advertisement;    -   maintain new operator signup web pages;    -   maintain online account status for operators;    -   generate and provide maps of access point locations to help        subscribers find nearby Internet services.

On a user terminal, Internet selection software, or “dialer” software,is executed in accordance with an embodiment of the invention to performa number of functions, including finding available Internet connections,soliciting information about Internet service offerings, receivingInternet access service advertisements, and displaying and/orautomatically selecting one of the service offerings. The serviceoffering descriptions may include offerings not directly visible to thesubscriber, but obtained indirectly via a wireless access point that isvisible. The dialer software may present a menu of service alternatives,highlighting available and/or potentially available service offerings.

Additionally, the dialer software provides for information evidencingthe identity of the subscriber at the user terminal, authorizing paymentfor services, including authorizing additional payments as credit isconsumed. The software furthermore may provide for display of a locationbased map of wireless access points based on information obtained from adatabase of independent WLAN operators maintained, for example, on theaggregator's server.

In particular, solicitation of service offerings contemplates the userterminal querying a wireless access point, or a database of informationabout wireless access points, for information relating to the serviceofferings for the access point. Information relating to serviceofferings includes such things as backhaul speed, latency, price perbyte, price per service period, etc. A typical example may include theinformation in the form of: “1.5 Mbps, 20 msec, $0.10/MB, $0.50/day (fora particular business franchise), Grade 1”, or “40 kbps, 90 msec,$0.25/MB, $0.00/day, Grade 4”.

Furthermore, the provider of the information, whether a gateway or anaggregator maintained database, may provide information about somenumber of geographically closest alternative wireless access points, sothat a subscriber may choose which service best fits their needs,budget, etc. Based on subscriber-configurable selection rules, thesubscriber can have their dialer software automatically select(“autoselect”) or at least automatically highlight the “best” service,whether best means lowest cost, fastest, or otherwise most desirableservice.

The autoselect feature operates, for example, based on user preferences,such as, but not limited to, minimum data transmission speed, maximumservice fees, minimum characteristics of service parameters, somecombination thereof, or a tradeoff between preferences (e.g., minimumdata transmission speed versus service fees).

The user or autoselector chooses and requests the service desired. Thisrequest may be in the form of a purchase order for a unit of service.For example, the subscriber may request purchase of a day of service,and request minting of a session identifier to be associated with thepurchase of such service. The gateway, for example, provides the sessionidentifier, S. The dialer software then continues with authorizingpayment of the appropriate amount for the day's service, for the sessionidentified by session key S. The payment, whether by check orcertificate, may be signed by the subscriber's private security key andsent by the gateway to the aggregator for verification.

In one embodiment, on fee-per-packet, fee-per-byte, or fee-per-minuteservices, money or payment may be metered out to the gateway as thesubscriber consumes the service. For example, the dialer software candeposit certificates with the gateway as service is consumed, thuslimiting the ability of a gateway to disappear or otherwise becomeunavailable before the subscriber's credit is all used. The process ofminting additional certificates and keeping the service in place shouldbe autonomous from the perspective of the subscriber, handled by thedialer software.

A typical scenario of operation of the above-described embodiment is asfollows. An individual, not yet a subscriber, installs a WLAN networkinterface card (NIC) in a user terminal, e.g., a laptop computer, andmoves within range of a wireless access point coupled to an independentWLAN associated with an aggregator. The WLAN software (protocol stack)in the individual's laptop obtains an IP address, e.g., using the wellknown Dynamic Host Configuration Protocol (see Internet Engineering TaskForce (IETF) Request for Comments (RFC) 2131. In this instance, DHCP,mediated by the gateway, e.g., gateway 225, provides a Internet Protocol(IP) address to the individual's laptop that routes or redirects packetsfrom the individual's laptop to the gateway, and in particular, to a webpage via which the individual is asked to provide as input informationneeded to sign up for the WLAN service provided via the aggregator. Inone embodiment, the service may initially be offered on a free trialbasis. Such free service could be keyed by credit card, so that if theuser, after free service expired a selected number of days, tried toagain sign up for free service using the same credit card, the freeservice would be denied. In another embodiment, all HTTP (web browsingtraffic) for an unregistered user is redirected to a subscription signup web page.

The sign up web page may provide, for example, the ability to downloadfree-trial software. After installing the software, the subscriberenjoys authorized access to the network for a limited period of timewithout a fee—in such case, the aggregator or a WLAN access pointoperator may subsidize the service for the limited period of time. Abuseof the free-trial service can be controlled by requiring submission ofvalid credit card information and utilizing a database of past freetrials to allow only a limited number of free trials per a given timeperiod and credit card.

The user enters credit card and personal information including emailaddress, and in response, the individual is allowed to download theInternet service selection (“dialer”) software and install the same onthe laptop, and generally complete the registration process.

As a registered subscriber, the individual, still within range of aparticipating WLAN, invokes execution of the dialer software and queriesfor wireless access points. After finding a number of access points, andquerying for rate information, the associated gateway(s) provideinformation regarding rate structures for services, as well asinformation regarding service grades as measured by the aggregator andmaintained in a server associated therewith. Additionally, a list ofgeographically nearby access point locations is provided, such listprovided and certified by the aggregator so that an independent WLANoperator cannot provide inaccurate or false information.

The subscriber selects the service desired, e.g., the service that bestmatches the subscriber's needs. Alternatively, the dialer softwareautomatically selects the service, for example, based on subscriberselectable (input) criteria. The dialer requests the correspondinggateway for a session, in part, by providing a certificate that is goodfor at least a limited amount of service. The gateway verifies thecertificate with the aggregator and then establishes a session.

At the close of the session, the gateway sends a session summary to theaggregator server, wherein the server creates a micro-transaction totransfer the specified value from the subscriber's account to the WLANoperator's account. The dialer software creates an entry in a local logfile on the user terminal of the transfer. The log file maintains, amongother things, a history of activity for the subscriber accountassociated with the user terminal, for later comparison against aninvoice for services provided.

Local log files collect at the user terminal and are later automaticallyreconciled against a billing statement, wherein discrepancies may beflagged and information of such relayed to the aggregator. Thefrequency, degree, and direction of the discrepancies may be used as abasis, at least in part, for determining the reputation of a WLANoperator.

At the end of a billing period, for example, at the end of a month, theaggregator sends an email-based statement to subscriber accounts andWLAN operator accounts, charges (debits) the subscribers' accounts, andcredits the operators' accounts accordingly. The aggregator withholds aportion of the subscriber's charge when crediting an operator's account.In one embodiment, the amount withheld could be nonlinear, for example,withholding a larger portion or fraction from more expensive operatorsto encourage operators to drive down usage rates, or any other suchscheme to influence subscriber fees.

CONCLUSION

Although the invention has been described in the detailed description aswell as in the Abstract in language specific to structural featuresand/or methodological steps, it is to be understood that the inventiondefined in the appended claims is not necessarily limited to thespecific features or steps described. Rather, the specific features andsteps are merely disclosed as exemplary forms of implementing theclaimed invention. It will, however, be evident that variousmodifications and changes may be made thereto without departing from thebroader spirit and scope of the present invention. The specification andfigures are accordingly to be regarded as illustrative rather thanrestrictive. The description and abstract are not intended to beexhaustive or to limit the present invention to the precise formsdisclosed.

The terms used in the following claims should not be construed to limitthe invention to the specific embodiments disclosed in thespecification. Rather, the scope of the invention is to be determinedentirely by the following claims, which are to be construed inaccordance with the established doctrines of claim interpretation.

In accordance with the teachings above, I claim the following:

1. A method comprising: receiving an access request for access to awireless local area network (WLAN) selected from a plurality of WLANs;requesting authentication of the access request from an authenticationserver; receiving an indication of the authentication of the accessrequest that verifies the access request is associated with a roamingservices account; providing access to the WLAN responsive to receivingthe indication of the authentication of the access request;transmitting, to an accounting server, metrics associated with theaccess to the WLAN; receiving an indication of a rebate from theaccounting server responsive to the metrics; wherein the rebate is atleast a portion of a payment received by the accounting server from theroaming services account; and wherein the accounting server isconfigured to centralize accounting for the plurality of WLANs.
 2. Themethod of claim 1 further comprising: requesting a payment authorizationcertificate for the access to the WLAN from a subscriber terminalassociated with a subscriber ID corresponding to the roaming servicesaccount; requesting authentication of the payment authorizationcertificate from an authentication server; receiving an indication ofthe authentication of the payment authorization certificate; providingaccess to the WLAN responsive to receiving the indication of theauthentication of the of the payment authorization certificate.
 3. Themethod of claim 1 further comprising: sending a subscriber terminalassociated with a subscriber ID corresponding to the roaming servicesaccount at least one of: WLAN access point location information, WLANquality of service statistics, WLAN characteristics of servicetestimonials, or marketing information.
 4. The method of claim 3 furthercomprising: receiving an acknowledgment from a WLAN operator including apromise to provide the subscriber terminal with the access to the WLAN.5. The method of claim 1 further comprising: coordinating hand-over of asubscriber terminal associated with a subscriber ID corresponding to theroaming services account; wherein the hand-over is from a first accesspoint in the WLAN to a second access point in a different WLAN selectedfrom the plurality of WLANs; and wherein the hand-over of the subscriberterminal to the second access point connects the subscriber terminal tothe different WLAN.
 6. A method comprising: requesting, from anauthentication server, authentication of an access request received froma subscriber terminal for access to a WLAN selected from a plurality ofWLANs; receiving, from the authentication server, an indication ofauthentication that verifies the access request is associated with anexisting roaming services subscriber account; providing the subscriberterminal with access to the WLAN responsive to the indication ofauthentication; tracking the access to the WLAN by the subscriberterminal; generating access metrics based on the tracking; providing anaccounting server with the access metrics; and receiving an indicationof a rebate paid to an independent WLAN operator operating the WLAN,responsive to the access metrics, wherein the rebate is at least aportion of a payment associated with the existing roaming servicessubscriber account.
 7. The method of claim 6 wherein each WLAN of theplurality of WLANs is operated by a corresponding independent WLANoperator of a plurality of independent WLAN operators.
 8. The method ofclaim 7 wherein the accounting server is configured to centralizeaccounting for the plurality of WLANs.
 9. The method of claim 7 furthercomprising: monitoring a quality of service provided by each of theplurality of independent WLAN operators; and providing quality ofservice information to the subscriber terminal responsive to receivingthe access request.
 10. The method of claim 9 wherein the quality ofservice information includes at least one of: a fee for access to eachof the plurality of WLANs; a measure of a rate of data delivered by eachof the plurality of WLANs; a measure of latency in transmitting andreceiving data by each of the plurality of WLANs; a measure of a currentavailability of each of the plurality of WLANs; an indication of a levelof subscriber satisfaction with each of the plurality of WLANs; anindication of when each of the plurality of WLANs was last accessed; ameasure of a total number of subscribers presently accessing each of theplurality of WLANs; an average data transmission rate for datatransferred over each of the plurality of WLANs; or an indication ofavailable data transmission capacity of each of the plurality of WLANs.11. A system, comprising: an authentication server configured to:receive an authentication request from a gateway associated with aplurality of WLANs, the request including a user ID associated with aterminal requesting access to a WLAN associated with the gateway,wherein the request for access is associated with a roaming servicesaccount; receiving an indication of the authentication of the accessrequest that verifies the access request is associated with a roamingservices account; send an indication of authentication of the user ID tothe gateway to authorize the terminal to gain access to the WLAN; andthe gateway configured to: provide the authorized terminal with accessto the WLAN; compile access statistics associated with the access to theWLAN; send the access statistics to an accounting server; and receive anindication of a rebate distribution to a WLAN operator corresponding tothe WLAN, wherein the rebate distribution is responsive to the accessstatistics, wherein the rebate is at least a portion of a paymentreceived by the accounting server from the roaming services account. 12.The system of claim 11 wherein the gateway is further configured to:receive an access request comprising the user ID from the user terminalrequesting access to the WLAN; and grant access to the WLAN responsiveto receiving the indication of authentication of the user ID, elseredirect an unauthenticated user terminal to the accounting server, theaccounting server further configured to query the unauthenticated userterminal for inputs to open a new user account.
 13. The system of claim11, wherein the rebate is at least a portion of a payment received bythe accounting server for services provided in association with anexisting user account associated with the user ID.
 14. The system ofclaim 11 wherein the accounting server is configured to centralizeaccounting of the plurality of WLANs.
 15. The system of claim 11 whereinthe gateway is configured to coordinate hand-off of the terminal from afirst access point corresponding to the WLAN to a second access pointcorresponding to a different WLAN of the plurality of WLANs, wherein thehand-off of the terminal to the second access point connects theterminal to the different WLAN and wherein the first and second accesspoints are associated with the gateway.
 16. A gateway comprising: adetector configured to compile statistics associated with access by auser terminal to a WLAN at a first access point, wherein the userterminal is authorized to use the first access point and the WLAN isselected from a plurality of WLANs, wherein the access to the WLAN atthe first access point is associated with an existing roaming servicessubscriber account; an accounting module configured to: transmit thestatistics to an accounting server; responsive to the statistics,receive an indication of a rebate paid to an independent WLAN operatoroperating the WLAN; wherein the rebate is a portion of a paymentreceived by the accounting server associated with the existing roamingservices subscriber account corresponding to the user terminal; andwherein the accounting module is configured to transmit the indicationof the rebate to the user terminal.
 17. The gateway of claim 16, whereinthe accounting server is configured to centralize accounting of theplurality of WLANs.
 18. The gateway of claim 16, wherein the gateway isconfigured to: solicit a payment authorization certificate from the userterminal; request authentication of the payment certificate from anauthentication server; and provide the user terminal with access to theWLAN responsive to receiving an indication of authentication of thepayment authorization certificate from the authentication server. 19.The gateway of claim 16, further comprising: a receiver configured toreceive an access request including a subscriber ID from the userterminal requesting access to the WLAN, the subscriber ID associatedwith the user terminal and the existing roaming services subscriberaccount; a transmitter configured to send an authentication request toan authentication server, the authentication request including thesubscriber ID; wherein the receiver is further configured to receive anindication of authentication of the subscriber ID from theauthentication server that verifies the user terminal is authorized toaccess the WLAN via the first access point; a Dynamic Host ConfigurationProtocol (DHCP) server configured to provide the user terminal with anInternet Protocol (IP) address for accessing the WLAN responsive to theauthentication verification.
 20. The gateway of claim 16, wherein thefirst access point is selected from a plurality of access pointsassociated with the gateway.
 21. The gateway of claim 20, furthercomprising a hand-off module configured to coordinate hand-off of theuser terminal from the first access point to a second access pointselected from the plurality of access points, the second access pointcorresponding to a different WLAN of the plurality of WLANs.
 22. Anapparatus comprising: means for providing access to a WLAN responsive toan authentication of an access request made by an existing roamingservices subscriber, wherein the access request is associated with aroaming services account; means for transmitting metrics associated withthe access to the WLAN to an accounting server; means for receiving anindication of a rebate from the accounting server responsive to themetrics, wherein the rebate is at least a portion of a payment receivedby the accounting server from the roaming services account; and meansfor coordinating hand-off of a subscriber terminal from a first accesspoint corresponding to the WLAN to a second access point correspondingto a different WLAN of a plurality of WLANs associated with a samegateway.
 23. The apparatus of claim 22 further comprising: means forreceiving an access request from a subscriber terminal for access to theWLAN; means for requesting authentication of the access request from anauthentication server wherein the access request contains a subscriberID associated with the existing roaming services subscriber; and meansfor receiving an indication of authentication of the subscriber ID fromthe authentication server.
 24. The apparatus of claim 22 furthercomprising; means for conditioning the access to the WLAN on receipt ofa promise to pay for the access to the WLAN from the subscriberterminal; and means for requesting authentication of the promise to payfor access to the WLAN received from the subscriber terminal.
 25. Theapparatus of claim 23 further comprising means for receiving maps ofavailable WLANs from the authentication server.
 26. A tangiblecomputer-readable medium having instructions stored thereon, theinstructions comprising: instructions for monitoring network accessstatistics associated with a user terminal accessing a WLAN at a firstaccess point, wherein the user terminal is authorized to use the firstaccess point, wherein the authorization to use the first access point isassociated with an existing roaming services subscriber account and theWLAN is selected from a plurality of WLANs; instructions fortransmitting the network access statistics to an accounting server;instructions for receiving an indication of a transfer of rebate fundsfrom the accounting server responsive to the network access statistics;wherein the rebate funds are a portion of a payment received by theaccounting server from the existing roaming services subscriber accountassociated with the user terminal; and wherein the rebate funds aredistributed to an independent WLAN operator associated with the WLAN.27. The tangible computer-readable medium of claim 26, wherein theaccounting server is configured to centralize accounting of theplurality of WLANs.
 28. The tangible computer-readable medium of claim26, the instructions further comprising: instructions for receiving anaccess request from the user terminal requesting access to the WLAN;instructions for sending an authentication request to an authenticationserver, the authentication request including a subscriber ID;instructions for receiving an authentication verification from theauthentication server that verifies the user terminal is authorized toaccess the WLAN responsive to receiving the subscriber ID, wherein thesubscriber ID is associated with an existing roaming services subscriberaccount; instructions for assigning the user terminal an IP address foraccessing the WLAN responsive to the authentication verification;wherein the first access point is selected from a plurality of accesspoints associated with a gateway; and instructions for coordinatinghand-over of the user terminal from the first access point to a secondaccess point selected from the plurality of access points, the secondaccess point corresponding to a different WLAN of the plurality ofWLANs.